Certificate

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
File:                     43FB377824B048048B8756B6C65C599B82AEB5B9.cer (raw, json)
Hash identifier:          gWp62bIL9QvkneZvDCSnn2Yjr4U0l/zBGFaCvUVNDoY=
Subject key identifier:   43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       56137B25B53767055636C1FA035F8D4CDE9E840B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest:                 rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
caRepository:             rsync://repo.rpki.space/repo/Pfcloud/0/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 17:29:45 +0000
Certificate not after:    Wed 28 May 2025 17:34:45 +0000
Subordinate resources:    IP: 2a14:7c0:7000::/36
                          IP: 2a14:7c2::/31

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 21:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:13:7b:25:b5:37:67:05:56:36:c1:fa:03:5f:8d:4c:de:9e:84:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: May 29 17:29:45 2024 GMT
            Not After : May 28 17:34:45 2025 GMT
        Subject: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:d4:53:1b:eb:c6:f7:17:a2:0f:f9:9f:cc:
                    36:53:9f:4e:47:5b:12:7d:4f:a9:df:4e:b2:2e:96:
                    1e:0b:3c:92:35:35:7e:61:38:b3:3c:a3:86:96:03:
                    f4:9e:e6:24:99:6f:88:72:51:2c:47:37:e4:fb:aa:
                    3a:b4:16:bc:c3:22:08:b5:5c:0a:75:42:7c:98:25:
                    b2:14:76:0e:fe:bf:80:a5:06:d9:f8:81:62:e6:9c:
                    2f:35:d3:89:2f:c5:b0:5d:87:cc:7e:bf:66:be:b9:
                    97:7c:51:6b:b5:f8:89:75:3d:e0:ff:41:dc:b5:fc:
                    f5:d9:bc:00:76:27:b2:be:4b:c5:7f:36:12:d7:6b:
                    11:8d:81:a4:1e:d9:e3:52:d1:b8:c6:74:50:51:bb:
                    ad:bd:41:64:73:1c:cc:b4:dc:5e:60:c0:8d:2f:4a:
                    c4:e6:88:91:0d:32:68:c8:20:75:d1:f7:6f:c8:bf:
                    2d:2f:3d:c7:2d:63:b8:d8:2f:04:9d:9d:b7:9b:ac:
                    ae:75:ec:09:cd:c0:41:e5:3a:de:47:78:93:35:32:
                    99:53:67:88:1b:61:b5:7f:7c:18:0e:31:c0:79:03:
                    86:6d:d9:d5:6a:b4:8e:32:b2:68:5b:e7:16:65:3f:
                    3c:55:e5:ed:41:ef:7e:0f:c5:14:91:0f:08:78:fd:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/Pfcloud/0/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7000::/36
                  2a14:7c2::/31

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:9e:b2:9f:20:7e:94:62:0d:cd:76:ef:99:3f:79:fb:a4:
         19:b3:8e:91:04:f1:56:d2:f9:dc:eb:de:6f:86:eb:34:e2:1c:
         03:94:85:af:a3:cc:9b:ff:c9:31:4b:7f:4d:f8:20:93:3a:46:
         b5:14:f3:b2:15:af:5f:f8:db:2b:37:cf:90:ee:a0:ff:22:2a:
         0d:cb:15:ab:80:7b:4d:59:b7:6e:ca:33:28:db:e5:a0:b4:90:
         25:27:c9:06:22:66:f9:1e:9b:c3:bf:08:16:f0:d1:a9:64:84:
         ef:44:e5:82:a6:95:28:2e:5d:9e:d1:c6:8a:a7:65:26:4b:15:
         8c:da:e5:02:9e:bc:5b:30:90:4a:31:c1:d3:6b:87:f0:9e:d8:
         69:c5:e7:e5:dc:0a:6a:fc:61:d8:b6:ca:01:eb:46:82:2c:de:
         71:a1:e0:05:0f:b0:f4:80:4d:c7:26:f9:35:91:17:51:e0:b8:
         97:30:60:6b:88:ec:51:da:73:f9:40:9c:8d:6e:bb:65:95:60:
         94:72:93:f7:f8:74:ec:69:b5:fd:9f:a4:5e:5c:dd:28:72:71:
         6b:c3:30:fa:51:d4:f4:99:27:0b:b0:15:50:4d:6d:ec:52:6c:
         44:4e:3a:40:17:84:dc:58:21:5f:75:1a:8e:dd:f2:4f:14:a7:
         73:30:01:2f
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUVhN7JbU3ZwVWNsH6A1+NTN6ehAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNDA1MjkxNzI5NDVaFw0yNTA1MjgxNzM0NDVaMDMxMTAvBgNV
BAMTKDQzRkIzNzc4MjRCMDQ4MDQ4Qjg3NTZCNkM2NUM1OTlCODJBRUI1QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6tRTG+vG9xeiD/mfzDZTn05H
WxJ9T6nfTrIulh4LPJI1NX5hOLM8o4aWA/Se5iSZb4hyUSxHN+T7qjq0FrzDIgi1
XAp1QnyYJbIUdg7+v4ClBtn4gWLmnC8104kvxbBdh8x+v2a+uZd8UWu1+Il1PeD/
Qdy1/PXZvAB2J7K+S8V/NhLXaxGNgaQe2eNS0bjGdFBRu629QWRzHMy03F5gwI0v
SsTmiJENMmjIIHXR92/Ivy0vPcctY7jYLwSdnbebrK517AnNwEHlOt5HeJM1MplT
Z4gbYbV/fBgOMcB5A4Zt2dVqtI4ysmhb5xZlPzxV5e1B734PxRSRDwh4/ZbzAgMB
AAGjggJdMIICWTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRD+zd4JLBIBIuH
VrbGXFmbgq61uTAfBgNVHSMEGDAWgBRbjiHGiQvXmrdk2Rtgw5w7fkmF4TAOBgNV
HQ8BAf8EBAMCAQYwaAYDVR0fBGEwXzBdoFugWYZXcnN5bmM6Ly9yZXBvLnJwa2ku
c3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xLzVCOEUyMUM2ODkwQkQ3OUFCNzY0RDkx
QjYwQzM5QzNCN0U0OTg1RTEuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9XNDRo
eG9rTDE1cTNaTmtiWU1PY08zNUpoZUUuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TAz
BggrBgEFBQcwBYYncnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9QZmNsb3Vk
LzAvMF8GCCsGAQUFBzAKhlNyc3luYzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL1Bm
Y2xvdWQvMC80M0ZCMzc3ODI0QjA0ODA0OEI4NzU2QjZDNjVDNTk5QjgyQUVCNUI5
Lm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9yZXBvLnJwa2kuc3BhY2UvcnJkcC9u
b3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKAYIKwYB
BQUHAQcBAf8EGTAXMBUEAgACMA8DBgQqFAfAcAMFASoUB8IwDQYJKoZIhvcNAQEL
BQADggEBAHmrnrKfIH6UYg3Ndu+ZP3n7pBmzjpEE8VbS+dzr3m+G6zTiHAOUha+j
zJv/yTFLf034IJM6RrUU87IVr1/42ys3z5DuoP8iKg3LFauAe01Zt27KMyjb5aC0
kCUnyQYiZvkem8O/CBbw0alkhO9E5YKmlSguXZ7RxoqnZSZLFYza5QKevFswkEox
wdNrh/Ce2GnF5+XcCmr8Ydi2ygHrRoIs3nGh4AUPsPSATccm+TWRF1HguJcwYGuI
7FHac/lAnI1uu2WVYJRyk/f4dOxptf2fpF5c3ShycWvDMPpR1PSZJwuwFVBNbexS
bEROOkAXhNxYIV91Go7d8k8Up3MwAS8=
-----END CERTIFICATE-----
Generated at Tue Jul 2 00:07:29 2024 by rpki-client on console-fra.rpki-client.org